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METHOD AND APPARATUS FOR FAULT-TOLERANT UPDATE 
OF FLASH ROM CONTENTS 

5 

BACKGROUND OF THE INVENTION 
FIELD OF THE INVENTION 

The present invention relates to the update of memory contents. More 
specifically, the present invention pertains to a method and apparatus for 
10 updating flash read only memory (ROM) contents in a fault-tolerant manner. 

Related Art 

Computer systems and other electronic devices have become integral 
tools that are used extensively to perform a wide variety of useful operations in 

1 5 modern society. Applications of computer systems can be found in virtually all 
fields and disciplines, including but not limited to business, industry, scientific 
research, education and entertainment. For instance, computer systems are 
used to analyze financial data, to control industrial machinery, to model 
chemical molecules, to deliver classroom presentations and to generate special 

20 effects for movies. Moreover, computer systems along with other electronic 
devices are finding new applications as a result of advances in hardware 
technology and rapid development in software technology. The growing 
affordability of computer systems and electronic devices together with the 
abundance of useful new applications have fueled strong demand for such 

25 systems and devices. 
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. Included within this broad category of computers and electronic devices 
is the personal digital assistant (commonly referred to as a PDA). Specifically, 
as the components required to build a computer system have been greatly 
reduced in size, new categories of computer systems have emerged. One of 
5 these new categories of computer systems is the PDA. A PDA is a portable 
computer system which is small enough to be held conveniently and 
comfortably in the hand of its user. In particular, a popular size for the typical 
PDA approximates the size of a palm. 

1 0 Since PDAs are such small devices, full-sized keyboards are generally 

not efficient input devices. For instance, PDAs using keyboards usually have 
keyboard devices that are so small that a user typically cannot touch-type on 
them. Many PDAs thus employ a stylus and a digitizer pad as an input system. 
The stylus and digitizer pad work well for PDAs because the arrangement 

15 allows a user to hold the PDA in one hand while writing with the stylus onto the 
digitizer pad with the other hand. A small on-screen keyboard image can also 
be used for data entry. By eliminating the need for a keyboard, PDAs are very 
portable and can be carried along by their users wherever they go, even when 
on extended travel. 

20 

Furthermore, the PDA is usually a battery-powered device that is typically 
used as an electronic organizer having the capability to store and display a 
wide range of information which can include numerous addresses and 
telephone numbers of business and personal acquaintances, financial 
25 information, daily appointments, along with various other personal information. 
As such, the PDA is able to consolidate a wide variety of information and make 
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the information easily accessible by its user. Therefore, PDAs are very useful- 
and have gained wide popularity. 

Nevertheless, a problem exists with respect to the updating of certain 
5 memory contents in PDAs and other handheld devices and computer systems. 
More specifically, PDAs and portable systems typically store boot code and 
operating system (OS) code in a flash memory. Unfortunately, the existing 
process of updating such contents (e.g., boot code, OS code) in the flash ROM 
is inherently error-prone and may not be interrupted or else the ROM will be 

1 0 corrupted or unusable. As a result, users and developers of such devices often 
end up with incorrect or corrupted flash ROM contents if error occur during the 
update process. Once the flash ROM is loaded with incorrect or corrupted data, 
the device is rendered inoperable, and the only recourse is to mechanically 
disassemble the device, perform costly and laborious manual rework to remove 

15 and replace the corrupted flash ROM component, reassemble the device, and 
then perform testing to verify that the device is fully functional. This is highly 
inconvenient and renders the user experience less pleasant than it would 
otherwise have been. In the case of third party software developers who 
encounter this situation, such time-consuming and cumbersome retrofitting 

20 process can also result in significant delays in their product development cycle 
and/or missing milestones and customer commitments. Thus, it would be highly 
advantageous to provide a method and apparatus for updating flash ROM 
contents which minimizes the inconvenience and cost to users. 

25 Additionally, a method and apparatus for updating flash ROM contents 

must not require complete revamping of existing computer systems. In other 
words, in implementing a viable method and apparatus for updating flash ROM 
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contents, components that are well known in the art and are compatible with - 
existing computer systems need to be used so that the cost of realizing the 
method and apparatus for updating flash ROM contents is low. By so doing, the 
need to incur costly expenditures for retrofitting existing computer systems or for 
5 building custom components is eliminated. 
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SUMMARY OF THE INVENTION 

It would be advantageous to provide a method and apparatus for 
updating flash ROM contents that could be interrupted and where the updating 
can be done with minimal inconvenience to the user. Furthermore, it would also 
5 be advantageous for such method and apparatus to utilize components that are 
well known in the art and are compatible with existing computer systems such 
that the method and apparatus is widely compatible with other systems and 
applications and does not require extensive retrofitting. 

1 0 Accordingly, the present invention provides a method and apparatus for 

an interruptable fault-tolerant update of flash ROM contents wherein the flash 
ROM does not become corrupted inadvertently. By so doing, embodiments of 
the present invention provide greatly enhanced user experience over existing 
implementations of flash ROM update mechanisms. Moreover, embodiments of 

1 5 the present invention can be efficiently implemented using components that are 
well known in the art and are compatible with existing computer systems. As 
such, the present invention delivers a method and apparatus that is widely 
compatible with other systems and applications and does not require extensive 
retrofitting. These and other advantages of the present invention not specifically 

20 mentioned above will become clear within discussions of the present invention 
presented herein. 

More specifically, in one embodiment of the present invention, a method 
for updating the contents of a first memory of a computer system is provided. In 
25 this embodiment, new information intended for the first memory is received by 
the computer system from an external source, wherein the first memory is for 
storing information that is required during startup of the computer system. The 
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new .information thus received is stored in a second memory of the computer* 
system, where the second memory is capable of retaining information stored 
therein upon a restart of the computer system. The method of this embodiment 
further includes restarting the computer system without relying on the new 
5 information. In one embodiment, the new ROM image can be pre-flighted 

before it is flashed into ROM. In this embodiment, the new information stored in 
the second memory is verified to ensure that it is safe to load the new 
information into the first memory. Additionally, when a positive verification result 
is obtained, the new information is loaded from the second memory into the first 

1 0 memory such that the new information can be used for a subsequent startup of 
the computer system. In a specific embodiment, the present invention includes 
the above and wherein the first memory comprises a flash ROM. In one 
embodiment, the present invention includes the above and wherein the 
computer system is a PDA. In a preferred embodiment, the present invention 

1 5 includes the above and wherein the new information is received by the 
computer system via wireless communication. 



Embodiments of the present invention include the above and wherein the 
new information comprises boot ROM code. Furthermore, embodiments of the 
20 present invention include the above and wherein the new information 
comprises operating system code. 
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BRIEF DESCRIPTION OF THE DRAWINGS 

The accompanying drawings, which are incorporated in and form a part 
of this specification, illustrate embodiments of the invention and, together with 
5 the description, serve to explain the principles of the invention: 

Figure 1 is a system illustration of an exemplary personal digital assistant 
computer system connected to other computer systems and the Internet via a 
cradle device. 

Figure 2A is a top side perspective view of an exemplary personal digital 
assistant computer system. 

Figure 2B is a bottom side perspective view of the personal digital 
assistant computer system of Figure 2A. 

Figure 3 is an exploded view of the components of the exemplary 
personal digital assistant computer system of Figure 2A. 

20 Figure 4 is a perspective view of the cradle device for connecting the 

personal digital assistant computer system to other systems via a 
communication interface. 

Figure 5 is a logical block diagram of circuitry located within the 
25 exemplary personal digital assistant computer system of Figure 2A. 
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Figure 6 is a flow diagram illustrating steps for updating the contents of a 
first memory of a computer system in accordance with one embodiment of the 
present invention. 

Figure 7 is a flow diagram illustrating steps for updating the contents of a 
first memory of a computer system in accordance with another embodiment of 
the present invention. 

Figure 8A is a block diagram illustrating the logical arrangement of error- 
checking program code and new ROM contents in accordance with one 
embodiment of the present invention. 

Figure 8B is a block diagram illustrating the logical arrangement of boot 
ROM code and OS code in a flash ROM in accordance with one embodiment of 
the present invention. 
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DETA1LED DESCRIPTION OF THE INVENTION 

In the following detailed description of the present invention, a method 
and apparatus for fault-tolerant update of flash ROM contents, numerous 
specific details are set forth in order to provide a thorough understanding of the 
5 present invention. However, it will be recognized by one skilled in the art that 
the present invention may be practiced without these specific details or with 
equivalents thereof. In other instances, well known methods, procedures, 
components, and circuits have not been described in detail as not to 
unnecessarily obscure aspects of the present invention. 

Q 10 

Jj NOTATION AND NOMENCLATURE 

q Some portions of the detailed descriptions which follow are presented in 

y terms of procedures, steps, logic blocks, processing, and other symbolic 

representations of operations on data bits within a computer memory. These 
ii 15 descriptions and representations are the means used by those skilled in the 
ffi data processing arts to most effectively convey the substance of their work to 

D others skilled in the art. A procedure, computer executed step, logic block, 

process, etc., is here, and generally, conceived to be a self-consistent sequence 
of steps or instructions leading to a desired result. The steps are those 
20 requiring physical manipulations of physical quantities. Usually, though not 
necessarily, these quantities take the form of electrical or magnetic signals 
capable of being stored, transferred, combined, compared, and otherwise 
manipulated in a computer system. It has proven convenient at times, 
principally for reasons of common usage, to refer to these signals as bits, 
25 values, elements, symbols, characters, terms, numbers, or the like. 
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it should be borne in mind, however, that all of these and similar terms 
are to be associated with the appropriate physical quantities and are merely 
convenient labels applied to these quantities. Unless specifically stated 
5 otherwise as apparent from the following discussions, it is appreciated that 
throughout the present invention, discussions utilizing terms such as 
"receiving", "storing", "restarting", "verifying", "loading" or the like, refer to the 
action and processes of a computer system (e.g., Figure 5), or similar electronic 
computing device, that manipulates and transforms data represented as 
Ef 10 physical (electronic) quantities within the computer system's registers and 
u j memories into other data similarly represented as physical quantities within the 

computer system memories or registers or other such information storage, 
transmission or display devices. 

Aspects of the present invention, described below, are discussed in 
terms of steps executed on a computer system. These steps (e.g., processes 
600 and 700) are implemented as program code stored in computer readable 
memory units of a computer system and are executed by the processor of the 
computer system. Although a variety of different computer systems can be used 
with the present invention, an exemplary personal digital assistant computer 
system is shown in Figure 5 further below. 
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AN ILLUSTRATIVE PERSONAL DIGITAL ASSISTANT (PDA) WITH W HICH 
FMROniMENTS OF THE PRESENT INVENTION CAN BE PRACTICED 
Referring now to Figure 1 , a system 50 that can be used in conjunction 
with the present invention is shown. It is appreciated that the method and 
apparatus for fault-tolerant update of flash ROM contents of the present 
invention can be used in conjunction with any computer system and that system 
50 is illustrative rather than limiting. It is further appreciated that the portable 
computer system 100 described below is only exemplary. System 50 
comprises a host computer system 56 which can either be a desktop unit as 
shown, or, alternatively, can be a laptop computer system 58. Optionally, one or 
more host computer systems can be used within system 50. Host computer 
systems 58 and 56 are shown connected to a communication bus 54, which in 
one embodiment can be a serial communication bus, but could be of any of a 
number of well known designs, e.g., a parallel bus, Ethernet, Local Area 
Network (LAN), etc. Optionally, bus 54 can provide communication with the 
Internet 52 using a number of well known protocols. 

Importantly, bus 54 is also coupled to a cradle 60 for receiving and 
initiating communication with a personal digital assistant computer system 100. 
Cradle 60 provides an electrical and mechanical communication interface 
between bus 54 (and anything coupled to bus 54) and computer system 100 for 
two way communications. Computer system 100 also contains a wireless 
infrared communication mechanism 64 for sending and receiving information 
from other devices. 
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With reference to Figure 2A, a perspective illustration of the top face 100a 
of exemplary personal digital assistant computer system 100 is shown. Top 
face 110a contains a display screen 105 surrounded by a bezel or cover. A 
5 removable stylus 80 is also shown. Display screen 105 is a touch screen 
capable of registering contact between the screen and the tip of stylus 80. 
Stylus 80 can be fabricated of any material which can make contact with screen 
105. Top face 100a also contains one or more dedicated and/or programmable 
buttons 75 for selecting information and causing computer system 100 to 
1 0 implement functions. An on/off button 95 is also shown. 



Referring still to Figure 2A, a handwriting recognition pad or "digitizer" 
containing regions 106a and 106b is also shown. Specifically, region 106a is 
for the drawing of alpha characters therein for automatic recognition and region 
15 106b is for the drawing of numeric characters therein for automatic recognition. 
Stylus 80 is used for stroking a character within one of the regions 1 06a and 
106b. The stroke information is then fed to an internal processor for automatic 
character recognition. Once characters are recognized, they are typically 
displayed on screen 105 for verification and/or modification. 

20 

Figure 2B illustrates the bottom side 100b of one embodiment of 
personal digital assistant computer system 100. An optional extendible 
antenna 85 is shown, and a battery storage compartment door 90 is shown as 
well. A communication interface 108 is also shown. In one embodiment of the 
25 present invention, the serial communication interface 108 is a serial 
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communication port, but it could also alternatively be of any of a number of well 
known communication standards and protocols, e.g., parallel, small computer 
system interface (SCSI), Ethernet, Firewire (IEEE 1394), etc. 

5 With reference now to Figure 3, an exploded view of the exemplary 

personal digital assistant computer system 100 is shown. System 100 contains 
a front cover 210 having an outline of region 106 and holes 75a for receiving 
buttons 75b. A fiat panel display 105 (both liquid crystal display and touch 
screen) fits into front cover 210. Any of a number of display technologies can be 
p 10 used, e.g., liquid crystal display (LCD), field emission device (FED), plasma, 
m etc., for the flat panel display 105. A battery 215 provides electrical power. A 

0 contrast adjustment (potentiometer) 220 is also shown. On/off button 95 is 

fjj shown along with an infrared emitter and detector device 64. A flex circuit 230 
s is shown along with a PC board 225 containing electronics and logic (e.g., 

01 15 memory, communication bus, processor, etc.) for implementing computer 
03 system functionality. The digitizer pad is also included in PC board 225. A 

P midframe 235 is shown along with stylus 80. Position adjustable antenna 85 is 

also shown. 

20 A radio receiver/transmitter device 240 is also shown between the 

midframe and the rear cover 245 of Figure 3. Radio receiver/transmitter device 
240 is coupled to antenna 85 and also coupled to communicate with PC board 
225. In one implementation, the Mobitex wireless communication system is 
used to provide two way communication between system 1 00 and other 

25 networked computers and/or the Internet via a proxy server. 
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Figure 4 is a perspective illustration of one embodiment of the cradle 60 
for receiving the personal digital assistant computer system 100. Cradle 60 
contains a mechanical and electrical interface 260 for interfacing with serial 
5 connection 108 (Figure 2B) of computer system 100 when system 100 is slid 
into the cradle 60 in an upright position. Once inserted, button 270 can be 
pressed to initiate two way communication between system 100 and other 
computer systems coupled to serial communication bus 54. 

10 Referring now to Figure 5, a block diagram of exemplary personal digital 

assistant computer system 100 is shown. Some of the modules shown in 
Figure 5 can be implemented on PC board 225. Computer system 100 includes 
an address/data bus 99 for communicating information, a central processor 101 
coupled with bus 99 for processing information and instructions, a volatile 

1 5 memory unit 102 (e.g., random access memory, static RAM, dynamic RAM, etc.) 
coupled with bus 99 for storing information and instructions for central 
processor 101 and a non-volatile memory unit 103 (e.g., read only memory, 
programmable ROM, flash memory, EPROM, EEPROM, etc.) coupled with bus 
99 for storing static information and instructions for processor 101 . As 

20 described above, computer system 1 00 also contains a display device 1 05 
coupled to bus 99 for displaying information to the computer user. PC board 
225 can contain processor 101, bus 99, volatile memory unit 102, and non- 
volatile memory unit 103. As described further below, portions of memory units 
102 and 103 can be removed from computer system 100. Moreover, computer 

25 system 100 can also include an optional data storage device 104 (e.g., memory 
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stick) for storing information and instructions. In one embodiment, optional data 
storage device 104 is removable from computer system 100. 

Also included in computer system 100 of Figure 5 is an optional 
5 alphanumeric input device 106 which, in one implementation, is a handwriting 
recognition pad ("digitizer") having regions 106a and 106b (Figure 2A), for 
instance. Device 106 can communicate information and command selections to 
central processor 101. Computer system 100 also includes an optional cursor 
control or directing device 107 coupled to bus 99 for communicating user input 

10 information and command selections to central processor 101. In one 

implementation, device 107 is a touch screen device incorporated with screen 
105. In this implementation, device 107 is capable of registering a position on 
screen 105 where a stylus makes contact. Display device 105 utilized with 
computer system 100 may be a liquid crystal device (LCD), cathode ray tube 

15 (CRT), field emission device (FED, also called flat panel CRT) or other display 
device suitable for creating graphic images and alphanumeric characters 
recognizable to the user. In a currently preferred embodiment, display 105 is a 
flat panel display. Computer system 100 also includes signal communication 
interface 108, which is also coupled to bus 99, and can be a serial port for 

20 communicating with cradle 60. Device 108 can also include an infrared 
communication port. 

It is appreciated that computer system 100 described herein illustrates an 
exemplary configuration of an operational platform upon which embodiments of 
25 the present invention can be implemented. Nevertheless, other computer 
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systemswith differing configurations can also be used in place of computer • 
system 100 within the scope of the present invention. 

OPERATION OF THE FAULT-TOLERANT FLASH ROM UPDATE METHOD 
IN ACCORDANCE WITH THE PRFSFNT INVENTION 
Referring next to Figure 6, a flow diagram illustrating steps for updating 
the contents of a first memory of a computer system in accordance with one 
embodiment of the present invention is shown. In step 610, new information 
intended for the first memory is received by the computer system from an 
external source, wherein the first memory is for storing information that is 
required during startup of the computer system. In a currently preferred 
embodiment, the first memory comprises a flash ROM. 

In one embodiment, the computer system is a PDA. In another 
embodiment, the external source is also a PDA. Moreover, in a currently 
preferred embodiment, the new information is received by the computer system 
via wireless communication (e.g., infrared beaming). It is appreciated that 
various forms of data communication, wired or wireless-based, can also be 
used within the scope of the present invention. 

Moreover, in one embodiment wherein the computer system is a PDA 
such as the Palm™ PDA, the new information, which is intended for the first 
memory but is stored in the second memory meanwhile, comprises boot ROM 
code. In another embodiment, the new information comprises operating system 
(OS) code (e.g., Palm™ OS code). Importantly, since the new information (e.g., 
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new ROM code, new OS code) is not loaded into the first memory (e.g., flash - 
ROM), the startup process is not dependent upon this untested new information. 
As a result, even if the new information turns out to be corrupted, incorrect, or 
otherwise incompatible with the computer system, the system will not be 
5 rendered inoperable because the existing and functional code is unaltered in 
the first memory. As such, this embodiment of the present invention 
advantageously eliminates the irreversible uninterruptable and error-prone 
aspects of prior implementations of flash ROM updates. 

O 10 In an alternative embodiment, the first memory (e.g., flash ROM) of the 

HI computer system has no contents stored therein initially. In this embodiment, 

Q the new information (e.g., new ROM code) is treated in the same manner as if 

'43 

W the first memory has existing contents, except that the first memory will simply 

- be populated rather than having its contents replaced if and when the new 

Ci 15 information is eventually loaded into the first memory, as will be described in 
fc 5 detail with reference to the other steps of the instant process 600 further below. 

Referring still to Figure 6, in step 620, the new information is stored in a 
second memory of the computer system, where the second memory is capable 
20 of retaining information stored therein upon a restart of the computer system. In 
one embodiment, the second memory comprises a random-access memory 
(RAM). 

In a currently preferred embodiment, program code for error-checking is 
25 "wrapped around," or appended to, the new information and stored into the 
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second memory. As is depicted in Figure 8A, in an embodiment where the 
computer system is a Palm™ PDA, the new ROM contents 810 with the program 
code 820 appended thereto, resembles a regular Palm application (e.g., in the 
form of a .pre file written for the Palm™ OS). Moreover, as shown in Figure 8B, 
5 the first memory (e.g., flash ROM) of the system typically comprises two images, 
namely, boot ROM 880 and OS code 890. It is appreciated that embodiments of 
the present invention can be applied to implement fault-tolerant update of boot 
ROM code 880, or OS code 890, or both, provided that proper modifications are 
made to new information 810 and program code 820 accordingly. 

10 

Referring still to Figure 6, in optional step 625, existing information in the 
first memory is copied to the second memory such that the existing information 
can be restored into the first memory should the first memory become corrupted. 
In other words, this embodiment advantageously provides an "undo" capability 
1 5 for the flash ROM update process. 

With reference still to Figure 6, in step 630, the computer system is 
restarted without relying on the new information. As described above, it is 
appreciated that in accordance with this embodiment of the present invention, 

20 the new information remains in the second memory and not stored in the first 
memory. As such, upon the system restart, the new information is not used or 
otherwise relied upon by the computer system. In an embodiment where 
optional step 625 is performed, should the first memory become corrupted for 
an unanticipated reason, the first memory can be restored to its uncorrupted 

25 state by using the image stored in the second memory by step 625. 



PALM-2849 



Confidential 



-19- 



Referring again to Figure 6, in step 640, the new information stored in the 
second memory is verified to ensure that it is safe to load the new information 
into the first memory. 

5 

In one embodiment, the verification as described in step 640 includes 
checking the version or the date stamp of the new information that is stored in 
the second memory to ensure that the new information is suitable for the 
computer system. For instance, the date stamp of the new information is 

1 0 compared against that of the existing information in the first memory to ensure 
that the new information is indeed newer or more up-to-date than the existing 
information residing in the first memory. In another embodiment, the version of 
the new information is verified against hardware specifications of the computer 
system to ensure that the new information is indeed compatible with the 

1 5 computer system. 

In yet another embodiment, a checksum test is performed on the new 
information as it is stored in the second memory to ensure that the new 
information is free from corruption. In still another embodiment, the power level 
20 of the computer system is examined to ensure that the loading of the new 
information from the second memory to the first memory, if performed as 
described below in step 650, can be completed without being interrupted by a 
power failure. 
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. With reference again to Figure 6, in step 650, when a positive verification 
result is obtained in step 640, the new information is loaded from the second 
memory into the first memory such that the new information can be used for a 
subsequent startup of the computer system. A method for updating the flash 
5 ROM contents in accordance with embodiments of the present invention is thus 
described. 

Referring next to Figure 7, a flow diagram illustrating steps for updating 
the contents of a first memory of a computer system in accordance with another 
10 embodiment of the present invention is shown. In step 710, new information 
intended for the first memory is received by the computer system from an 
external source, wherein the first memory is for storing information that is 
required during startup of the computer system. In a currently preferred 
embodiment, the first memory comprises a flash ROM. 

15 

In one embodiment, the computer system is a PDA. In another 
embodiment, the external source is also a PDA. Moreover, in a currently 
preferred embodiment, the new information is received by the computer system 
via wireless communication (e.g., infrared beaming). It is appreciated that 
20 various forms of data communication, wired or wireless-based, can also be 
used within the scope of the present invention. 

Moreover, in one embodiment wherein the computer system is a PDA 
such as the Palm™ PDA, the new information, which is intended for the first 
25 memory but is stored in the second memory meanwhile, comprises boot ROM 
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code. In another embodiment, the new information comprises operating system 
(OS) code (e.g., Palm™ OS code). Importantly, since the new information (e.g., 
new ROM code, new OS code) is not loaded into the first memory (e.g., flash 
ROM), the contents of the first memory remains intact. As a result, even if the 
5 new information turns out to be corrupted, incorrect, or otherwise incompatible 
with the computer system, the system will not be rendered inoperable because 
the existing and functional code is unaltered in the first memory. As such, this 
embodiment of the present invention advantageously eliminates the irreversible 
and error-prone aspects of prior implementations of flash ROM updates. 

10 

Referring still to Figure 7, in step 720, the new information is stored in a 
second memory of the computer system, where the second memory is capable 
of retaining information stored therein upon a restart of the computer system. In 
one embodiment, the second memory comprises a random-access memory 
15 (RAM). 

With reference still to Figure 7, in step 730, the computer system is 
restarted using the new information in the second memory instead of existing 
information in the first memory to test the new information. As described above, 
20 it is appreciated that in accordance with this embodiment of the present 

invention, the new information remains in the second memory and not stored in 
the first memory. 

Referring again to Figure 7, in step 740, when a positive test result is 
25 obtained in step 730, the new information is loaded from the second memory 
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into the first memory such that the new information can be used for a 
subsequent startup of the computer system. 

With reference again to Figure 7, in step 750, when a negative test result 
is obtained in step 730, the computer system is restarted using the existing 
information in the first memory. In this case, the new information is not loaded 
from the second memory into the first memory. By so doing, corruption of the 
first memory is advantageously avoided. Thus, this embodiment of the present 
invention provides a mechanism for performing riskless "test runs" of the new 
information (e.g., new ROM code, new OS code) without the danger of 
irreversibly corrupting the first memory (e.g., flash ROM). A method for updating 
the flash ROM contents in accordance with embodiments of the present 
invention is thus described. 

Significantly, embodiments of the present invention as described above 
enable any user or developer who needs to update the flash ROM contents of a 
computer system to accomplish the task conveniently and in a fault-tolerant 
manner. Importantly, the user does not have to get directly involved with the 
underlying aspects of the present invention. More specifically, the user just 
needs to enable the receipt of the new information (e.g., boot ROM code, OS 
code) by the computer system (e.g., by beaming the new information from a 
source PDA to the PDA that needs the update via an infrared port) and the 
process proceeds automatically in accordance with the present invention 
without any further user intervention. As such, the present invention provides a 
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mechanism which facilitates the fault-tolerant update of flash ROM contents 
which is superior to prior implementations for the same. 



Furthermore, since embodiments of the present invention utilize 
5 components that are already parts of the computer system and that are well 
known in the art, such as flash ROM and RAM, embodiments of the present 
invention can be efficiently implemented and afford advantageous compatibility 
with other systems and applications, thereby greatly enhancing the user 
experience while minimizing the cost to the user. 

10 

Although certain embodiments of the present invention as described 
herein pertains to PDAs, it is appreciated that many other advantageous 
applications are possible within the scope of the present invention. For 
example, the present invention can be advantageously applied to the flash 

15 ROM update of numerous other devices, such as digital cameras and media 
players, among others. Therefore, the present invention enables numerous 
possibilities in modern society where a wide range of systems and appliances 
include flash memory of one kind or another whose contents require occasional 
or periodic updates. It should be clear to a person of ordinary skill in the art, 

20 having read the description of embodiments of the present invention herein, that 
other applications and embodiments not expressly described herein are also 
possible without departing from the scope and spirit of the present invention. 

The preferred embodiment of the present invention, a method and 
25 apparatus for fault-tolerant update of flash ROM contents, is thus described. 
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While the present invention has been described in particular embodiments, it' 
should be appreciated that the present invention should not be construed as 
limited by such embodiments, but rather construed according to the below 
claims. 
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CLA1MS - 

What is claimed is: 

5 1 . A method for updating contents of a first memory of a computer 

system, said method comprising the steps of: 

a) receiving new information for said first memory from an external 
source, said first memory for storing information that is required during startup of 
said computer system; 
1 0 b) storing said new information in a nonvolatile second memory of 

said computer system; 

c) restarting said computer system without relying on said new 
information; 

d) verifying said new information stored in said second memory to 
1 5 ensure that it is safe to load said new information into said first memory; and 

e) responsive to said verifying, loading said new information from 
said second memory into said first memory wherein said new information can 
be used for a subsequent startup of said computer system. 

20 2, The method as recited in Claim 1 further comprising the step of 

copying existing information in said first memory to said second memory such 
that said existing information can be restored into said first memory should said 
first memory become corrupted. 

25 3. The method as recited in Claim 1 wherein said step d) comprises 

the step of checking a version date of said new information in said second 
memory to ensure that said new information is suitable for said first memory. 
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4. The method as recited in Claim 1 wherein said step d) comprises 
the step of performing a checksum test of said new information in said second 
memory to ensure that said new information is free from corruption. 

5 

5. The method as recited in Claim 1 wherein said step d) comprises 
the step of checking a power level of said computer system to ensure that said 
step e) can be completed without a power failure. 

10 6. The method as recited in Claim 1 wherein said first memory 

comprises a flash read-only memory (ROM). 

7. The method as recited in Claim 1 wherein said new information 
comprises boot ROM code. 

15 

8. The method as recited in Claim 1 wherein said new information 
comprises operating system (OS) code. 

9. The method as recited in Claim 1 wherein said first memory has 
20 no information stored therein initially. 

10. The method as recited in Claim 1 wherein said second memory 
comprises a random-access memory (RAM). 

25 11. The method as recited in Claim 1 wherein said new information is 

received via wireless communication. 
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12. The method as recited in Claim 1 wherein said computer system is 
a personal digital assistant (PDA). 

13. The method as recited in Claim 1 wherein said external source is 
5 a personal digital assistant (PDA). 

14. A computer system comprising: 
a processor; 

a first memory, coupled to said processor, for storing information that is 
1 0 required during startup of said computer system; 

an input output device, coupled to said processor, for receiving new 
information intended for said first memory from an external source; 

a second memory, coupled to said processor, for storing said new 
information, said second memory capable of retaining information stored 
1 5 therein upon a restart of said computer system; 

said processor for restarting said computer system without relying on 
said new information; said processor further for verifying said new information 
stored in said second memory to ensure that it is safe to load said new 
information into said first memory; and said processor also for loading said new 
20 information from said second memory into said first memory such that said new 
information can be used for a subsequent startup of said computer system 
provided that said verifying of said new information yields a positive verification 
result. 

25 1 5. The computer system as recited in Claim 14 wherein said 

processor is further for copying existing information in said first memory to said 
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second memory such that said existing information can be restored into said 
first memory should said first memory become corrupted. 

16. The computer system as recited in Claim 14 wherein said 

5 processor is also for checking a version date of said new information in said 
second memory to ensure that said new information is suitable for said first 
memory. 

17. The computer system as recited in Claim 14 wherein said 

1 0 processor is also for performing a checksum test of said new information in said 
second memory to ensure that said new information is free from corruption. 

18. The computer system as recited in Claim 14 wherein said 
processor is also for checking a power level of said computer system to ensure 
that said loading of said new information from said first memory into said 
second memory can be completed without a power failure. 

19. The computer system as recited in Claim 14 wherein said first 
memory comprises a flash read-only memory (ROM). 

20. The computer system as recited in Claim 14 wherein said new 
information comprises boot ROM code. 

21 . The computer system as recited in Claim 14 wherein said new 
25 information comprises operating system (OS) code. 
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. 22. The computer system as recited in Claim 14 wherein said first 
memory has no information stored therein initially. 

23. The computer system as recited in Claim 14 wherein said second 
5 memory comprises a random-access memory (RAM). 

24. The computer system as recited in Claim 14 wherein said new 
information is received via wireless communication. 

10 25. The computer system as recited in Claim 14 wherein said 

computer system is a personal digital assistant (PDA). 

26. The computer system as recited in Claim 14 wherein said external 
source is a personal digital assistant (PDA). 

15 

27. A method for updating contents of a first memory of a computer 
system, said method comprising the steps of: 

a) receiving new information intended for said first memory from an 
external source, said first memory for storing information that is required during 

20 startup of said computer system; 

b) storing said new information in a second memory of said computer 
system, said second memory capable of retaining information stored therein 
upon a restart of said computer system; 

c) restarting said computer system using said new information in said 
25 second memory instead of existing information in said first memory to test said 

new information; 
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. d) responsive to a positive test result from said step c), loading said 
new information from said second memory into said first memory such that said 
new information can be used for a subsequent startup of said computer system; 
and 

e) responsive to a negative test result from said step c), restarting 
said computer system using said existing information in said first memory. 

28. The method as recited in Claim 27 wherein said first memory 
comprises a flash read-only memory (ROM). 

29. The method as recited in Claim 27 wherein said second memory 
comprises a random-access memory (RAM). 

30. The method as recited in Claim 27 wherein said computer system 
is a personal digital assistant (PDA). 
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. METHOD AND APPARATUS FOR FAULT-TOLERANT UPDATE 
OF FLASH ROM CONTENTS 

ABSTRACT OF THE INVENTION 
5 Method and apparatus for updating the contents of a first memory of a 

computer system. In one embodiment, new information intended for the first 
memory is received by the computer system from an external source, wherein 
the first memory is for storing information that is required during startup of the 
computer system. The new information thus received is stored in a second 

1 0 memory capable of retaining information stored therein upon a restart of the 
computer system. The computer system is restarted without relying on the new 
information. The new ROM image can be pre-f lighted before it is flashed into 
ROM. In this embodiment, the new information stored in the second memory 
can be verified to ensure that it is safe to load the new information into the first 

15 memory. When a positive verification result is obtained, the new information is 
loaded from the second memory into the first memory such that the new 
information can be used for a subsequent startup of the computer system. In a 
specific embodiment, the present invention includes the above and wherein the 
first memory comprises a flash ROM. In one embodiment, the present invention 

20 includes the above and wherein the computer system is a PDA. In a preferred 
embodiment, the present invention includes the above and wherein the new 
information is received by the computer system via wireless communication. 
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